HP 5120 SI Series

101
Configuring a MAC authentication critical VLAN
Configuration prerequisites
Before you configure a MAC authentication critical VLAN on a port, complete the following tasks:
• Enable MAC authentication.
• Enable MAC-based VLAN on the port.
• Create the VLAN to be specified as the MAC authentication critical VLAN.
Configuration procedure
Follow these steps to configure a MAC authentication critical VLAN:
To do… Use the command… Remarks
Enter system view. system-view —
Enter Layer 2 Ethernet
interface view.
interface interface-type
interface-number
—
Configure a MAC
authentication critical VLAN.
mac-authentication critical vlan
critical-vlan-id
Required
By default, no MAC authentication
critical VLAN is configured.
You can configure only one MAC
authentication critical VLAN on a
port.
When the MAC authentication critical VLAN function and MAC authentication quiet function are
configured on a port, the critical VLAN function has a higher priority. When a user fails MAC
authentication because no RADIUS authentication server is reachable, the user can access the resources
in the critical VLAN, and the user's MAC address is not marked as a silent MAC address. For more
information about MAC authentication quiet function, see MAC authentication timers.
Displaying and maintaining MAC authentication
To do… Use the command… Remarks
Display the MAC authentication
related information
display mac-authentication
[ interface interface-list ] [ | { begin
| exclude | include }
regular-expression ]
Available in any view
Clear the MAC authentication
statistics
reset mac-authentication statistics
[ interface interface-list ]
Available in user view